<h3><strong>What we're looking for:</strong></h3><p>We are seeking a Director of Information Security to own our information security strategy and policy. This individual will prioritize a strategic roadmap to mitigate risk against all relevant threat vectors (including application/product security and employee security), monitor the effectiveness of the security program, and interface with regulators and third parties to represent and defend Arcadia’s posture. The ideal candidate is detail-oriented and data-driven, with an excitement for problem-solving and working collaboratively with others in a fast-paced, highly dynamic environment.</p><p>This role is based in Washington, D.C., or New York City, NY, though we are open to considering a remote candidate and will report directly to the Head of Engineering. Additionally, this candidate will collaborate frequently with other engineers as well as the Product, Enterprise Solutions, IT, Legal and Regulatory, Operations, and Analytics &amp; Data Science teams.</p><h3><strong>What you'll do:</strong></h3><ul><li>Define and drive Arcadia’s information security roadmap, strategy, tactics, and execution</li><li>Lead and mentor a team of security engineers to implement a comprehensive security program</li><li>Architect programs and processes that evaluate and enhance Arcadia's information security policies through monitoring, remediation, reporting, and auditing</li><li>Partner with Arcadia’s engineering teams during scoping and execution of all roadmap deliverables to ensure that security concerns are treated as first-class product requirements </li><li>Respond appropriately and effectively to security-related incidents and report back to key internal and external stakeholders</li><li>Participate in externally requested security audits from partners</li><li>Lead efforts to periodically review and update information security and privacy policy best practices across the company</li><li>Work with a leading policy team on developing regulatory structures around utility data access and security</li><li>Oversee and coordinate security efforts across the company alongside Engineering, IT, HR, Product, Legal, and more</li><li>Stay up to date with IT/Security industry trends and evaluate new solutions &amp; techniques</li><li>Launch company-wide security initiatives and training</li></ul><h3><strong>What will help you succeed:</strong></h3><h3><strong>Must-haves:</strong></h3><ul><li>6+ years of prior experience in information security and/or risk management, preferably at a SaaS company</li><li>3+ years of management experience</li><li>Experience working in a fast-paced, startup environment</li><li>Experience implementing SOC II, GDPR and CCPA compliance</li><li>Skill with collaboration, mentoring, learning from other engineers, and treating colleagues with empathy and respect</li><li>Excellent verbal, written and interpersonal communication skills, including the ability to effectively communicate security and risk-related concepts to individuals with technical and non-technical backgrounds</li><li>Deep knowledge and application of software development and quality assurance methodologies to application and infrastructure delivery</li><li>Proven track record of designing, launching, and driving successful adoption of company-wide security initiatives and programs</li><li>Passion for our mission, sustainability, and helping drive a clean-energy future</li></ul><h3><strong>Nice-to-haves:</strong></h3><ul><li>Professional security management certification such as CISSP, CCISO, CISM, GIAC, and/or other CISA</li><li>Familiarity with AWS (or an equivalent cloud-provider) and the related security best practices</li></ul><h3><strong> </strong><strong>Benefits:</strong></h3><ul><li>"Remote first" culture - work anywhere in the US as long as you have a reliable internet connection</li><li>Flexible PTO - no accrued hours and no limit on the number of vacation days exempt employees can take each year</li><li>17 annual company-wide holidays, including a week-long "summer break"</li><li>10 days sick leave</li><li>Up to 4 weeks bereavement leave</li><li>2 volunteer days off</li><li>2 professional development days off</li><li>12 weeks paid parental leave for <em>all</em> parents</li><li>80-95% employer cost coverage for medical, dental, and vision benefits for employees and dependents</li><li><a href="https://www.arcadia.com/assets/Engineering_Strategy_and_Values_V4.pdf">A supportive engineering culture that values diversity, empathy, teamwork, trust, and efficiency</a></li></ul><p><strong>Eliminating carbon footprints, eliminating carbon copies.</strong></p><p>Here at Arcadia, we cultivate diversity, celebrate individuality, and believe unique perspectives are key to our collective success in creating a clean energy future. Arcadia is committed to equal employment opportunities regardless of race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, protected veteran status, or any status protected by applicable federal, state, or local law. Please note that we are unable to offer visa sponsorship for this position at this time</p><p>We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.</p><p>Target Annual Compensation Range for this role will be $165,000 to $295,000. There will also be a competitive benefits and equity (bonus if applicable) component to the package. The exact compensation at which this job is filled will be determined by the skills, experience, and location of the qualified candidate. Please note that we are not able to offer visa sponsorship at this time. </p><div><p>Thank you</p></div>

<p>Arcadia is a technology company empowering energy innovators and consumers to fight the climate crisis. Our software and APIs are revolutionizing an industry held back by outdated systems and institutions by creating unprecedented access to the data and clean energy needed to make a decarbonized energy grid possible.</p>
<p>In 2014, Arcadia set out on its mission to break the fossil fuel monopoly and since then we have been knocking down the institutional barriers to unlock decarbonization. To date, we have connected hundreds of thousands of consumers and small businesses with high-quality clean energy options. Fast forward to today, and now, we&rsquo;re thinking even bigger. We have launched Arc, an industry-defining SaaS platform that empowers developers and energy innovators to deliver their own custom, personalized energy experiences, accelerating the transformation of the industry from an analog energy system into a digitized information network.</p>
<p>Tackling one of the world&rsquo;s biggest challenges requires out-of-the-box thinking &amp;amp; diverse perspectives. We&rsquo;re building a team of individuals from different backgrounds, industries, &amp;amp; educational experiences. If you share our passion for ushering in the era of the clean electron, we look forward to learning what you would uniquely bring to Arcadia!</p>

Director, Information Security

<h3><strong>What we're looking for:</strong></h3><p>We are seeking a Director of Information Security to own our information security strategy and policy. This individual will prioritize a strategic roadmap to mitigate risk against all relevant threat vectors (including application/product security and employee security), monitor the effectiveness of the security program, and interface with regulators and third parties to represent and defend Arcadia’s posture. The ideal candidate is detail-oriented and data-driven, with an excitement for problem-solving and working collaboratively with others in a fast-paced, highly dynamic environment.</p><p>This role is based in Washington, D.C., or New York City, NY, though we are open to considering a remote candidate and will report directly to the Head of Engineering. Additionally, this candidate will collaborate frequently with other engineers as well as the Product, Enterprise Solutions, IT, Legal and Regulatory, Operations, and Analytics &amp; Data Science teams.</p><h3><strong>What you'll do:</strong></h3><ul><li>Define and drive Arcadia’s information security roadmap, strategy, tactics, and execution</li><li>Lead and mentor a team of security engineers to implement a comprehensive security program</li><li>Architect programs and processes that evaluate and enhance Arcadia's information security policies through monitoring, remediation, reporting, and auditing</li><li>Partner with Arcadia’s engineering teams during scoping and execution of all roadmap deliverables to ensure that security concerns are treated as first-class product requirements&nbsp;</li><li>Respond appropriately and effectively to security-related incidents and report back to key internal and external stakeholders</li><li>Participate in externally requested security audits from partners</li><li>Lead efforts to periodically review and update information security and privacy policy best practices across the company</li><li>Work with a leading policy team on developing regulatory structures around utility data access and security</li><li>Oversee and coordinate security efforts across the company alongside Engineering, IT, HR, Product, Legal, and more</li><li>Stay up to date with IT/Security industry trends and evaluate new solutions &amp; techniques</li><li>Launch company-wide security initiatives and training</li></ul><h3><strong>What will help you succeed:</strong></h3><h3><strong>Must-haves:</strong></h3><ul><li>6+ years of prior experience in information security and/or risk management, preferably at a SaaS company</li><li>3+ years of management experience</li><li>Experience working in a fast-paced, startup environment</li><li>Experience implementing SOC II, GDPR and CCPA compliance</li><li>Skill with collaboration, mentoring, learning from other engineers, and treating colleagues with empathy and respect</li><li>Excellent verbal, written and interpersonal communication skills, including the ability to effectively communicate security and risk-related concepts to individuals with technical and non-technical backgrounds</li><li>Deep knowledge and application of software development and quality assurance methodologies to application and infrastructure delivery</li><li>Proven track record of designing, launching, and driving successful adoption of company-wide security initiatives and programs</li><li>Passion for our mission, sustainability, and helping drive a clean-energy future</li></ul><h3><strong>Nice-to-haves:</strong></h3><ul><li>Professional security management certification such as CISSP, CCISO, CISM, GIAC, and/or other CISA</li><li>Familiarity with AWS (or an equivalent cloud-provider) and the related security best practices</li></ul><h3><strong>&nbsp;</strong><strong>Benefits:</strong></h3><ul><li>"Remote first" culture - work anywhere in the US as long as you have a reliable internet connection</li><li>Flexible PTO - no accrued hours and no limit on the number of vacation days exempt employees can take each year</li><li>17 annual company-wide holidays, including a week-long "summer break"</li><li>10 days sick leave</li><li>Up to 4 weeks bereavement leave</li><li>2 volunteer days off</li><li>2 professional development days off</li><li>12 weeks paid parental leave for <em>all</em> parents</li><li>80-95% employer cost coverage for medical, dental, and vision benefits for employees and dependents</li><li><a href="https://www.arcadia.com/assets/Engineering_Strategy_and_Values_V4.pdf">A supportive engineering culture that values diversity, empathy, teamwork, trust, and efficiency</a></li></ul><p><strong>Eliminating carbon footprints, eliminating carbon copies.</strong></p><p>Here at Arcadia, we cultivate diversity, celebrate individuality, and believe unique perspectives are key to our collective success in creating a clean energy future. Arcadia is committed to equal employment opportunities regardless of race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, protected veteran status, or any status protected by applicable federal, state, or local law. Please note that we are unable to offer visa sponsorship for this position at this time</p><p>We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.</p><p>Target Annual Compensation Range for this role will be $165,000 to $295,000. There will also be a competitive benefits and equity (bonus if applicable) component to the package. The exact compensation at which this job is filled will be determined by the skills, experience, and location of the qualified candidate. Please note that we are not able to offer visa sponsorship at this time.&nbsp;</p><div><p>Thank you</p></div>

Director, Information Security

About the Job

About the Company

Arcadia

Similar Jobs

Director, Security Engineering

Director, Security Engineering

Director, Cybersecurity & Risk

Director, Cybersecurity & Risk

Director, CyberSecurity

Director, CyberSecurity

Senior security engineer

Senior security engineer

Information Security Officer (all genders)

Information Security Officer (all genders)

Specialist, DevSecOps

Specialist, DevSecOps

Head of IT Security EMEA

Head of IT Security EMEA

Global IT Security Expert - OT

Global IT Security Expert - OT

Manager, Cybersecurity & Operations

Manager, Cybersecurity & Operations

Network & Security Engineer

Network & Security Engineer